[wp-trac] [WordPress Trac] #11959: Value Truncation Still Unchecked in registration.php

WordPress Trac noreply at wordpress.org
Thu Aug 8 14:21:17 UTC 2013


#11959: Value Truncation Still Unchecked in registration.php
--------------------------+-----------------------------
 Reporter:  miqrogroove   |       Owner:
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Future Release
Component:  Users         |     Version:
 Severity:  normal        |  Resolution:
 Keywords:  needs-patch   |
--------------------------+-----------------------------

Comment (by johnpbloch):

 Regarding fixing this issue, what would be the preferable way to fix it?
 It seems to me that `username_exists()` should not truncate the username
 to 60 characters, since that would give a false positive. It seems to me,
 rather, that functions like `wp_insert_user()` or `sanitize_user()` should
 be making this sort of check instead of `username_exists()`. Thoughts?

--
Ticket URL: <http://core.trac.wordpress.org/ticket/11959#comment:7>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list